MS Active Directory Federation Services Information Disclosure Vulnerability (3003381)

Summary
This host is missing an important security update according to Microsoft Bulletin MS14-077.
Impact
Successful exploitation will allow remote attackers to obtain potentially sensitive information. Impact Level: System/Application
Solution
Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the link, https://technet.microsoft.com/en-us/security/bulletin/ms14-077
Insight
Vulnerability exists when Active Directory Federation Services (AD FS) fails to properly log off a user.
Affected
Active Directory Federation Services 2.0 on Windows Server 2008 x86/x64 sp2, Active Directory Federation Services 2.0 on Windows Server 2008 R2 sp1, Active Directory Federation Services 2.1 on Windows Server 2012, Active Directory Federation Services 3.0 on Windows Server 2012 R2.
Detection
Get the vulnerable file version and check appropriate patch is applied or not.
References